Ortus-iHealth is committed to protecting your privacy through its secure information technology service and complying with applicable privacy laws. Ortus-iHealth is also referred to as “we” and “us” in this statement and when referred to, such reference includes any person or Clinic to which it has licensed or assigned its rights and obligations.

This Privacy Statement applies to your use of the Ortus-iHealth website found at mmh.ortus-ihealth.com as an account holder and the Personal Information collected by Ortus-iHealth for the purposes of providing its patient portal services. In this Notice, “Personal Information” means your Health Information as well as any other information identifiable to you which is collected or stored by Ortus-iHealth for the purpose of providing its patient portal services including your account information and any information contained in email communications between you and your participating Healthcare Provider(s) using your Ortus-iHealth account. “Health Information” means any information about your health which is identifiable to you. “Healthcare Provider” means the healthcare provider who initially provided you access to your Health Information via Ortus-iHealth Patient Portal.

Ortus-iHealth Patient Portal is a personal health service that lets you review, gather, edit, store, and deal with health information online. With Ortus-iHealth Patient Portal, you have the ability to access your own medical records. You can also share your Health Information with family, friends, and other healthcare providers, and have access to online health information management tools.

You can choose to share specific information (or all information) with other people (such as friends and family) and with applications (such as applications that add data to your health records, provide information to your Healthcare Provider, or use some of your health records to receive customised information about managing your health).

The Ortus-iHealth Patient Portal also provides information on well being generally and incorporates contributions from third parties.

By using Ortus-iHealth Patient Portal™, you accept the following statement: “I acknowledge that I have read this Privacy Statement, and agree to meet any obligations imposed on me in this Statement in using Ortus-iHealth Patient Portal. I also acknowledge and agree to the collection, use and disclosure of my personal information by Ortus-iHealth and my health services provider as is set out in this Privacy Statement.”.

Your Personal Information is collected by Ortus-iHealth for the purpose of providing the services available on Ortus-iHealth Patient Portal. Ortus-iHealth may also use your Personal Information for the purpose of making improvements to Ortus-iHealth Patient Portal, for providing customer support and data repair services and for any other purposes described in this Privacy Statement.

Ortus-iHealth may collect your Health Information indirectly from you from via your Healthcare Provider if you have authorized your Healthcare Provider to upload it to Ortus-iHealth Patient Portal. This includes periodic updates to your Health Information, which may be supplied by third party healthcare providers where you have consented to share all or some of your Health Information with third party healthcare providers via Ortus-iHealth Patient Portal.

Ortus-iHealth may collect your Health Information directly from you when it is entered or uploaded by you to your Ortus-iHealth account or communicated by you in email communications between you and your Healthcare Provider using your Ortus-iHealth account.

If you submit or allow Health Information to be uploaded to Ortus-iHealth Patient Portal on behalf of another individual (other than a minor in your care), you must be authorized to do so by the individual concerned. You must ensure that you have appropriate permission from that individual to provide that individual’s health information to Ortus-iHealth and for Ortus-iHealth and any authorised third parties to use and disclose that information in accordance with this Notice. Any such individual should have access to and should review this Privacy Statement.

To create an account, your personal information such as name, date of birth, e-mail address and physical address is used. You can review and update your account information. You can modify, add, or delete any optional account information by signing into your Ortus-iHealth account and editing your account profile.

Any information submitted to Ortus-iHealth community forums or blogs becomes public information and is not covered by this Notice. Accordingly you should be cautious as to what information you disclose in these forums.

Ortus-iHealth is not responsible for the accuracy of your Health Information at the point where it is uploaded to Ortus-iHealth Patient Portal, whether by you or by your Healthcare Provider. You must take reasonable steps in the circumstances to ensure the accuracy of Health Information you upload to your Ortus-iHealth account (including any corrections or modifications) and any Health Information provided by you on another individual’s behalf. You should not upload any Health Information to your Ortus-iHealth account unless the accuracy of such information can be verified by your Healthcare Provider.

You must not use or rely on Health Information provided to you via Ortus-iHealth Patient Portal if the information appears incorrect.

It is important for you to maintain the accuracy of your contact information so that you can be contacted at any time.

Any Personal Information you maintain with your Ortus-iHealth account will be hosted on servers in a secure environment by a commercially reputable hosting vendor using best practice security techniques and encryption.

If you authorise your Healthcare Provider to upload your Health Information to Ortus-iHealth Patient Portal, you are consenting to Ortus-iHealth storing that information on your behalf and obtaining periodic updates to the records via your Healthcare Provider.

When any Health Information is uploaded to your Ortus-iHealth account, it is sent over the Internet using Secure Sockets Layer (SSL). This method encrypts the information to help prevent others from reading it while it is in transit from a computer to Ortus-iHealth Patient Portal.

Health Information held by Ortus-iHealth is encrypted within the Ortus-iHealth Patient Portal database. Personal Information is hosted in a secure environment by a commercially reputable third party hosting vendor, using best practice security techniques.

If you are using Ortus-iHealth Patient Portal to upload Health Information, you should properly secure your computer. To help do this, you can use anti-spyware and virus protection software. You can also restrict access to your computer (for example, by using a strong password for your computer login and a network firewall).

Ortus-iHealth cannot be held liable in any way for events beyond our control, including accidental or unauthorized access or disclosure of your Health Information caused by you or persons authorized by you accessing your Ortus-iHealth account.

Accidental access could be obtained by leaving yourself logged on and leaving your computer unattended, ‘over-the-shoulder’ access or from unsecure print-outs of your information.

Unauthorized access could involve someone who is known to you guessing your password or a stranger/hacker circumventing our security measures. Social networking is the easiest way to achieve unauthorized access to your information. To prevent this never give your access details to anyone, and this includes your password and your secret answer.

Health Information uploaded to Ortus-iHealth Patient Portal from your Healthcare Provider is encrypted during transmission. Personal Information provided to you via your web browser is similarly encrypted during transmission using the highest standard available, including VeriSign Digital Certificates. This provides at least 128 bit encryption or 256 bit encryption if you are using the latest version of the web browser.

Ortus-iHealth Patient Portal is protected by a reputable network Firewall. Daily backups are performed to allow system restores to be performed in a disaster recovery situation.

Use of your Personal Information by Ortus-iHealth is limited to the purposes of providing the services available on Ortus-iHealth Patient Portal and the other uses set out in this Notice as modified from time to time.

Ortus-iHealth uses your Personal Information to provide and operate Ortus-iHealth Patient Portal This includes using your Personal Information to make Ortus-iHealth Patient Portal or its services easier to use, for example, by automatically filling data fields with your Personal Information to avoid the need to repeatedly enter information.

Ortus-iHealth may use or allow your Personal Information to be used for providing you with informative content via your Ortus-iHealth account which is customized to your needs, interests and preferences (as determined from your Health Information).

Disclosure of your Personal Information by Ortus-iHealth is limited to the purposes of providing the services available on Ortus-iHealth Patient Portal and the other possible disclosures set out in this Notice as modified from time to time.

For the purpose of providing Ortus-iHealth Patient Portal™, Ortus-iHealth may disclose your Personal Information to employees and representatives of Ortus-iHealth in order that they can provide data repair activities and customer support services. Ortus-iHealth follows strict internal procedures to ensure that its representatives and employees are made aware of and comply with privacy obligations that may apply to them in collecting, storing and disclosing your Personal Information.

A feature of Ortus-iHealth Patient Portal is the ability to share your Health Information with people and services that can help you manage your health or meet your health-related goals. You can share information in a Ortus-iHealth Patient Portal account with another person or business through Ortus-iHealth.

By default, access to your Personal Information will be limited to you and your Healthcare Provider (including other doctors within your Healthcare Provider’s practice). Ortus-iHealth will disclose your Personal Information to your Healthcare Provider each time it accesses your Ortus-iHealth Patient Portal account.

If you have granted consent to your Healthcare Provider to share your Health Information with other healthcare providers, Ortus-iHealth may disclose your Health Information to those Healthcare Providers to the extent access is permitted. You may withdraw this consent at any time by contacting your Healthcare Provider.

You may increase the number of persons authorized to access your Health Information using an optional “trust list” functionality, which will allow you to grant access to other individuals involved with your care and family members. You decide what level and degree of access to grant other users of your Ortus-iHealth Patient Portal records. To the extent you have permitted, Ortus-iHealth may disclose your Health Information to these authorized users once you have granted them access.

Ortus-iHealth may disclose your Personal Information without your consent if required to do so by law or in good faith believe that such action is necessary to: comply with the law, comply with legal proceedings served on Ortus-iHealth or Ortus-iHealth Patient Portal or protect and defend the rights or property of Ortus-iHealth and our family of web sites.

Ortus-iHealth may disclose your Personal Information to a third party if it deems it necessary to protect your personal safety, or the safety of members of the public. This includes allowing third party healthcare providers’ access to your Health Information in emergency situations where it is not possible to first gain your consent. You may prevent your Health Information from being disclosed in this situation by contacting your Health Care Provider or Ortus-iHealth.

Ortus-iHealth may allow the disclosure of your information in an unidentified, aggregated form to third parties for the purpose of outsourcing marketing services or for the analysis of population health statistics. This might include, for example, the sale of your Health Information by healthcare providers to public health boards. This aids the planning of effective healthcare services within your region, and is extremely valuable for allowing healthcare services to be targeted to the needs of the population.

To access your Health Information held by your participating Healthcare Provider, an access code must be ordered in person from the Healthcare Provider. One specific e-mail address must be provided along with a valid photo-id.

We will act reasonably to ensure you will have access to your Health Information uploaded to your Ortus-iHealth Patient Portal account at all times, however we cannot guarantee that access to your Health Information will always be available. Access may be temporarily unavailable if a planned outage is required or if Ortus-iHealth Patient Portal experiences an unplanned outage. Such events are considered beyond our control but all reasonable efforts will be used to re-establish the service as soon as possible.

To protect your security, access to your account will be blocked following 3 failed attempts to logon. Your account can be unblocked by using the forgotten password function on the website. When your account is blocked, you will be offered the opportunity to obtain a copy of any Health Information you have uploaded to your account. Health Information that was provided by your Healthcare Provider or any other third party can be obtained from the relevant third party.

You have the right to correct the Health Information available through your Ortus-iHealth Patient Portal account at any time.

Information uploaded by you can be modified by you at anytime. If you modify your Health Information available on Ortus-iHealth Patient Portal you must consider what impact that may have on a person or healthcare provider authorized by you who may have previously received the information. If this impact is significant you should inform the individual or healthcare provider of the change. You should not make any modifications to the Health Information you have uploaded to your Ortus-iHealth Patient Portal account unless the accuracy of the modifications can be verified by your Healthcare Provider.

Health Information uploaded to your Ortus-iHealth Patient Portal account which was provided to Ortus-iHealth by your Healthcare Provider or other third party cannot be modified by Ortus-iHealth. You may request to have this information corrected at any time by contacting your Healthcare Provider or other relevant third party and requesting a correction.

As indicated above, whenever we rely on your consent to process your personal data, you have the right to withdraw your consent at any time by accessing the privacy settings in the App.

You also have specific rights under the GDPR and DPA to:

You may also contact the Information Commissioners Office (the data protection regulator in the UK): Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone: 0303 123 1113 (local rate).

We may provide you with information about applications that connect with Ortus-iHealth Patient Portal™. You can view the applications and should examine their privacy statements and terms of use prior to using them or allowing them access to any of your Health Information. In order to access Ortus-iHealth Patient Portal™, the application provider must commit to protecting the privacy of your health data.

No application has access to your information through Ortus-iHealth Patient Portal unless and until an authorised user opts in through Ortus-iHealth Patient Portal to grant it access. You control what health information you allow an application to access and the length of time they can access the information.

To keep you informed of the latest improvements, Ortus-iHealth Patient Portal will send you a newsletter. By creating an account you have given us your implied consent to send you such newsletters. If you do not want to receive the newsletter, you can unsubscribe at any time.

The primary unique identifier used within Ortus-iHealth Patient Portal is chosen by you together with an email address, which you have authorized us to use to communicate with you. No other unique identifier is linked to you by Ortus-iHealth Patient Portal™.

While an email address is globally unique we cannot guarantee that it will always be assigned to the same person. If an email address is no longer used by an individual it is then typically ‘made available’ to anyone else who wants to use it, much the same as a phone number. In the case of children we allow the use of a parent’s email address. Once an individual becomes 16 years old they become responsible for maintaining their account access by other persons such as their parents.

This Privacy Statement may be updated from time to time – the “last updated” date is included at the top of the Privacy Statement. We encourage you to review this Privacy Statement periodically to stay informed about how we may use and disclose your Personal Information. Your continued use of Ortus-iHealth Patient Portal constitutes your acknowledgement that you have read this Privacy Statement and any updates that are accessible on our website (at mmh.ortus-ihealth.com).

Ortus-iHealth is required to comply with applicable privacy legislation when dealing with Personal Information. If you would like any further information or have any queries relating to this Privacy Statement or our information handling practices in general, please contact us at:

Privacy Officer
Ortus-iHealth Patient Portal

ORTUS SOLUTIONS LIMITED
1st Floor, Gallery Court,
28 Arcadia Avenue,
London, N3 2FG, UK

or

Email: support@ortus-ihealth.com